4grayandClaude Opus 5.5 a4e4bcd880 fix(sources): clean credentials nested in kept URL parts ...

Codex bot (PR review, P1): stripUrlCredentials copied every non-sensitive
parameter value unchanged, so a URL nested in one (a proxy's
?url=http%3A%2F%2Fjoe%3Ahunter2%40origin.test%2F…) kept its userinfo and
password and reached the Sources row through sourceDisplayUrl.

Kept query and fragment values and path segments are now cleaned
recursively, up to four levels: a nested URL loses its credentials the
same way, a nested parameter list loses its sensitive keys, and a part
that still names a secret (joe:hunter2@host, token=…) is dropped. Deeper
nesting is dropped rather than shown.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 20:24:47 +02:00

..

epg/data-access

ci(test): type-check Jest spec programs and gate it in CI (#1705)

2026-09-27 20:54:27 +02:00

m3u-state

refactor(sources): remove the old source row, filter state and dead styles

2026-10-12 22:34:22 +02:00

playback

chore(deps): bump mpegts.js from 1.8.1 to 1.8.2 (#1835)

2026-10-06 14:20:13 +02:00

playlist

fix(switcher): fall back to All when the remembered type has no sources left

2026-10-13 20:13:55 +02:00

portal

fix(sources): show a new search's first match; keep inconclusive check causes

2026-10-13 19:01:56 +02:00

services

fix(sources): sort by the shown name; start the benchmark's Undo window in its trigger

2026-10-13 18:15:09 +02:00

shared

fix(sources): clean credentials nested in kept URL parts

2026-10-13 20:24:47 +02:00

ui

Merge origin/master into claude/design-handoff-prompt-d0aee4

2026-10-13 09:12:37 +02:00

workspace

fix(sources): keep ⌘P out of open dialogs; redact refresh errors

2026-10-13 18:47:15 +02:00

vercel.json

ci: add vercel configuration file to manage deployment settings

2026-04-06 15:05:06 +02:00